This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a333030303a3a2f34382d3438203d3e20323635333834.roa
File: 323830343a333334303a333030303a3a2f34382d3438203d3e20323635333834.roa (raw, json)
Hash identifier: Rv+2kouePE7c2tZHefKQmS6QEtJSLDoyuvVkiB7H60M=
Subject key identifier: 46:23:A4:8A:BD:F5:D6:CB:2C:F8:B0:E7:51:79:22:31:60:6C:A4:CF
Certificate issuer: /CN=2AAD0546D869051DF88F8860A3540C3582BA1456
Certificate serial: 640AFCBF8C8745E3ADF5AD384764505D2D2E474A
Authority key identifier: 2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a333030303a3a2f34382d3438203d3e20323635333834.roa
Signing time: Wed 03 Dec 2025 15:17:25 +0000
ROA not before: Wed 03 Dec 2025 15:12:25 +0000
ROA not after: Wed 02 Dec 2026 15:17:25 +0000
asID: 265384
IP address blocks: 2804:3340:3000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl
rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 04:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0a:fc:bf:8c:87:45:e3:ad:f5:ad:38:47:64:50:5d:2d:2e:47:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AAD0546D869051DF88F8860A3540C3582BA1456
Validity
Not Before: Dec 3 15:12:25 2025 GMT
Not After : Dec 2 15:17:25 2026 GMT
Subject: CN=4623A48ABDF5D6CB2CF8B0E751792231606CA4CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3e:24:a0:19:ff:f8:d0:53:66:0f:a0:7e:1a:
a1:4a:de:01:69:13:22:e8:35:39:02:18:93:de:8d:
6b:2b:48:62:29:63:1e:34:76:08:ed:28:89:d1:e9:
61:a3:3f:7e:f4:b5:00:7e:87:22:17:72:31:76:20:
9d:78:36:44:07:a3:12:4f:41:bf:09:c5:b9:04:a2:
7d:d2:01:18:d9:c1:02:e8:25:66:bb:06:7c:0f:e8:
d6:f0:b1:22:f7:bb:6a:60:d4:ba:67:f7:7a:06:7f:
bb:06:4a:16:9c:0d:68:17:b5:17:8d:35:ba:5b:bc:
10:77:4a:b9:d1:f1:d5:22:ba:63:38:02:48:58:d3:
ce:40:38:05:52:5f:95:0b:06:a3:3c:72:de:7d:64:
e0:38:8b:dd:70:e7:50:25:dc:53:be:40:74:e2:ae:
a6:43:84:8e:26:5f:ba:cc:f2:b6:68:bf:a7:e3:12:
00:9f:c7:b8:88:ec:87:6d:49:ea:a0:eb:7b:26:86:
31:84:94:d1:ea:21:cb:8a:d4:7d:ef:9f:f9:19:b3:
11:cb:82:28:8a:fb:37:42:e9:f4:4f:5e:60:af:85:
fa:d2:3b:41:fa:99:2f:18:24:34:cd:e4:40:9f:32:
1f:bf:31:7d:75:ee:cc:67:9d:87:7d:bc:82:8c:c7:
31:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:23:A4:8A:BD:F5:D6:CB:2C:F8:B0:E7:51:79:22:31:60:6C:A4:CF
X509v3 Authority Key Identifier:
keyid:2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a333030303a3a2f34382d3438203d3e20323635333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3340:3000::/48
Signature Algorithm: sha256WithRSAEncryption
c3:91:03:1e:b9:db:8d:d2:83:9d:b5:79:e7:cd:3b:4c:17:61:
36:5b:fb:bd:72:6e:8d:80:4f:05:7c:0b:26:1d:f1:05:de:17:
e4:39:06:00:b6:a6:7a:07:6a:a4:68:04:26:dd:d7:16:f9:38:
43:47:7e:15:20:2c:e0:b2:92:2d:c0:19:28:43:f3:98:0e:8a:
7d:f7:1e:3b:d1:85:33:c1:4e:32:7f:00:07:47:98:33:a1:a1:
ba:56:ca:c0:9a:c8:38:f4:85:06:5c:8b:52:b6:e5:c2:cc:4c:
7d:24:5f:a5:cd:c1:bd:86:73:34:dc:ff:ee:bf:cf:47:c4:55:
01:2d:37:2d:32:12:93:43:dc:c9:6c:b0:a8:c0:24:75:d5:1f:
32:a9:93:35:35:78:47:5b:55:2b:1e:88:23:ed:3f:6c:62:70:
45:c4:f4:65:c6:c6:b5:90:dc:fb:6b:29:bc:e2:7c:79:e9:4d:
5b:d1:bd:a2:fe:8e:97:c7:a8:f2:08:0e:2a:55:99:dc:28:7a:
57:22:bf:13:f8:0f:50:bf:b8:99:0f:a7:23:8b:69:8f:30:3f:
51:18:77:ea:5e:f8:b6:3c:75:51:47:30:3a:a6:bf:31:63:ce:
4a:a2:3b:cc:36:00:e3:73:0d:35:51:f6:d8:04:1e:fa:c0:a7:
e0:36:c3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:45:45 2025 by rpki-client